EUVD-2010-1060

Integer overflow in the decompression functionality in the Web Open Fonts Format WOFF decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vdff modul...

CVE-2010-1028

CVE-2010-1028 concerns an integer overflow in the Web Open Font Format (WOFF) decoder used by Mozilla Firefox. The vulnerability stems from how the WOFF decompression routine handles table sizes, which can lead to a buffer/heap overflow and remote code execution when a crafted WOFF file is opened...